Merged field in $request-&gt;validated()

Level 58

One solution to this problem is to override the validated method in the form request class to merge the user_id field before returning the validated data. Here's an example:

namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;

class StorePostRequest extends FormRequest
{
    public function rules()
    {
        return [
            'title' => 'required|string|max:255',
            'content' => 'required|string',
        ];
    }

    public function validated()
    {
        $data = parent::validated();
        $data['user_id'] = auth()->user()->id;
        return $data;
    }
}

In this example, we're extending the FormRequest class and overriding the validated method. We first call the parent validated method to get the validated data, and then we merge the user_id field with the authenticated user's ID. Finally, we return the merged data.

Now, when we call $request->validated() in the controller's store method, the user_id field will be included in the validated data:

public function store(StorePostRequest $request)
{
    Post::query()
        ->create($request->validated());

    return redirect()->route('posts.index')
        ->with('success', 'Post created.');
}

Level 8

@LaryAI I tried this, but it's not working. It's not on point. Thanks Lary the #AI!

1 like

Snapey

Best Answer

Level 122

I usually do something like

    Post::create($request->validated() + ['user_id' => auth()->id]);

or (better)

    auth()->user()->posts()->create($request->validated());

and then the user ID is automatically added by Eloquent

2 likes

Level 8

@Snapey Wow! let me try this one, didn't know you can append by using +.

Snapey

Level 122

@benjamin1509 see updated answer for a better solution

1 like

luis-cy2

Level 1

@snapey What if you want to do the same but inside a custom request once data has been validated?

Level 8

@luis-cy2 Hi, please make a new thread and just reference the answer by @snapey here.

bretto36

Level 2

Check if user_id is in the list of rules on the request. If it's not in the Request rules then it won't be returned by validated.... as it wasn't validated

Level 8

@bretto36 Yeah I get that. But you wouldn't typically include user_id in a form, right? that could be a security risk since anyone could submit a request with any random user_id and insert data for another user

JussiMannisto

Level 50

@NoLAstNamE You don't need to add user_id at all if you create the model "the right way", which is:

$request->user()->posts()->create($request->validated());

You could add it to the list of validated input by overriding the validated() method in your form request, but it's a bad solution. You could also add the user_id manually when creating the model, but the method above is better and cleaner.

Post::create([
	...$request->validated(),
	'user_id' => $request->user()->id,
])